The Linux kernel's stmmac_rx function previously set skb->ip_summed to CHECKSUM_UNNECESSARY whenever hardware checksum offload was enabled and the packet was a known IP ethertype, without verifying if the hardware reported a checksum error. This omission meant that corrupt packets with checksum failures could be passed up the network stack as valid. The patch fixes this by checking the csum_none status flag, which the hardware sets when a checksum error occurs, and setting skb->ip_summed to CHECKSUM_NONE to trigger software checksum validation, preventing corrupt packets from being accepted as valid.

This vulnerability could allow corrupt network packets to be accepted as valid by the Linux kernel network stack, potentially leading to data integrity issues or denial of service conditions. The CVSS vector indicates no confidentiality impact, high integrity impact, and low availability impact. There are no known exploits in the wild at this time.

A patch has been applied to the Linux kernel to correct the checksum offload error handling in the stmmac driver. Users should update to a kernel version that includes this fix. Since no explicit patch links or vendor advisories are provided, verify with the official Linux kernel release notes or vendor updates for the fixed version. Patch status is not yet confirmed in this data—check the vendor advisory for current remediation guidance.